Search code examples
digital-signatureyubico

How to sign a message using Yubikey

I'm interested in using a yubikey to sign a message. Im aware that openPGP can be used to sign a message using a yubikey but the signature includes some metadata as described here: https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-rfc4880bis-06#section-5.2.4

For my use case, I'd like to just sign a message or a hash of a message and thats it(no extra metadata). Is there something like a C library interface to use for signing a message using a yubikey?

Solution

  • OpenSC offers an pkcs11 implementation to interface the Yubikey as a PKI device https://github.com/OpenSC/OpenSC/wiki